— Legal information
Privacy policy
Last updated: April 28, 2026
At Spain Luxury Center we respect users' privacy and are committed to protecting their personal data in compliance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD).
This policy describes who is the data controller, what data we collect, for what purpose, for how long, with whom we share it and how the user can exercise their rights.
1. Data controller
- Controller
- RAZÓN SOCIAL O NOMBRE COMPLETO
- Tax ID
- XX-00000000-X
- Trade name
- Spain Luxury Center
- Address (Madrid)
- Calle Varsovia, 10 · 28232 Las Rozas de Madrid
- Address (Gijón)
- Calle Juan Alvargonzález, 11 · 33208 Gijón
- Phone numbers
- 653 41 63 90 · 675 48 11 28
- spainluxury@contact.es
The fields marked in red must be completed with the actual fiscal information of the controller.
2. Data we collect
Through the contact forms and enabled communication channels (email, WhatsApp, phone) we may collect:
- Identification data: first and last name.
- Contact data: email, phone.
- Vehicle data: make, model, year, registration (when voluntarily provided).
- Message content: information the user chooses to include.
- Browsing data: IP, device type, browser and behaviour (via cookies).
3. Purposes and legal basis of processing
| Purpose | Legal basis | Retention |
|---|---|---|
| Handle enquiries, requests for information and quotes. | Art. 6.1.b — pre-contractual measures | Until the enquiry is resolved and the legal limitation period (1 year). |
| Performance of the contracted service. | Art. 6.1.b — performance of a contract | During the contractual relationship and legal periods (4 years tax, 6 years commercial). |
| Compliance with legal obligations. | Art. 6.1.c — legal obligation | Periods set by law. |
| Sending commercial communications. | Art. 6.1.a — consent | Until consent is withdrawn. |
| Management and response on social media. | Art. 6.1.f — legitimate interest | While the user interacts on the platform. |
4. Retention periods
Personal data will be retained for the time necessary to fulfil the purpose for which it was collected. Once that purpose has ended, the data will be kept blocked during the applicable legal periods and, after these have elapsed, it will be securely deleted.
5. Data recipients
Data will not be shared with third parties, except:
- When there is a legal obligation (Tax Agency, Social Security, Law Enforcement, Judges and Courts).
- To data processors with a signed contract under article 28 GDPR: hosting, email, management, corporate messaging.
6. International transfers
Some technology providers are located outside the EEA:
- Google LLC (Maps, Fonts) — USA, EU-US Data Privacy Framework.
- Meta Platforms (Facebook, Instagram, WhatsApp) — USA, EU-US Data Privacy Framework.
- Trustindex — Hungary, within the EEA.
- Vercel (hosting) — USA, with GDPR standard contractual clauses.
When transfers are made to third countries without an adequate level of protection, the appropriate safeguards provided for in the GDPR will be adopted.
7. Rights of the data subject
The GDPR grants the data subject the following rights, which can be exercised free of charge:
- Access: to know what data is being processed.
- Rectification: to correct inaccurate or incomplete data.
- Deletion: to request removal when no longer necessary.
- Opposition: to object to processing on personal grounds.
- Restriction: to suspend processing in certain circumstances.
- Portability: to receive the data in a structured format.
- Withdrawal of consent: at any time, without affecting prior lawfulness.
- No automated decisions: that produce significant legal effects.
To exercise these rights, contact spainluxury@contact.es with subject "Data protection" and a copy of ID/passport.
You may also lodge a complaint with the Spanish Data Protection Agency: www.aepd.es.
8. Minors' data
Services are exclusively directed to people over 14 years old. Data of minors below that age are not processed. If submission of data by an unauthorised minor is detected, it will be immediately deleted.
9. Security measures
The controller has adopted the appropriate technical and organisational measures under article 32 GDPR: HTTPS/TLS encryption, access control, backups and breach notification procedures.
10. Cookies
The site uses own and third-party cookies for technical, analytical and personalisation purposes. For more details, please refer to the Cookies Policy (pending publication).
11. Social media
Spain Luxury Center maintains profiles on Instagram (@spainluxurycenter_) and Facebook (spainluxurycenter), as well as a WhatsApp channel. Interaction through these platforms implies acceptance of their respective privacy policies.
12. Changes to the privacy policy
This policy may be updated to adapt to legislative or operational changes. When changes substantially affect users' rights, they will be notified on the site.
13. Contact
- Email: spainluxury@contact.es
- Phones: 653 41 63 90 · 675 48 11 28
